The Barracuda CloudGen Firewall supports various platforms. You can manage your CloudGen Firewall individually as a stand-alone box or centrally via a Firewall Control Center. Each deployment option has its individual license type. For general information about License types, see CloudGen Firewall Licensing.
When licensing a hardware or virtual CloudGen Firewall, you must change the initial default password to a new password of your choice after logging in. Afterwards, you can access your firewall with your new password as long as your license is valid. If the license expires, you can access your firewall by using only your new password because the default password is deleted during the initial change. Licenses are bound to the MAC address of the network interface the management IP is on. To activate, the firewall and the client running Barracuda Firewall Admin must have access to api.bcc.barracudanetworks.com and bcc.barracudanetworks.com on TCP port 443. When activating and installing licenses on a Firewall Control Center, only the client running Barracuda Firewall Admin must have access to the licensing server on TCP 443.
Hardware appliances only need to be activated. Following activation, the licenses are downloaded by the firewall automatically.
For more information, see How to Activate and License a Stand-alone Hardware CloudGen Firewall Appliance.
Virtual units are activated by entering the serial number and license token you received from Barracuda Customer Services. After activation, the licenses are downloaded by the firewall VM automatically.
For more information, see How to Activate and License a Stand-Alone Virtual or Public Cloud Firewall or Control Center.
High Availability Cluster Licensing
When licensing units in a high availability cluster, you must activate the secondary unit first. The secondary unit will not download any licenses after activation. Instead, it waits for the primary unit to be activated. The primary unit then downloads the licenses for both units and installs the license on the secondary unit via HA sync.
For more information, see How to Activate and License a Standalone High Availability Cluster.
Licensing for Managed Firewalls
Firewalls managed by a Firewall Control Center are activated and licensed through the Control Center.
For more information, see Licensing CloudGen Firewalls in the Control Center.
Public Cloud Licensing
CloudGen Firewalls deployed in AWS, Azure, or Google public clouds are activated by entering the serial number and license token. After activation, the licenses are downloaded by the firewall VM automatically.
For more information, on how to activate a BYOL license on your public cloud firewall, see How to Activate and License a Stand-Alone Virtual or Public Cloud Firewall or Control Center.
To switch from PAYG to BYOL licenses, the firewall instance must be redeployed. For instructions, see Best Practice - Migrate to Different License Type for PAYG or BYOL Public Cloud Firewalls.